Christian Brabandt 8e41c34aba patch 9.2.0481: runtime(netrw): command injection possible via maps ...

Problem:  runtime(netrw): command injection possible via crafted
          directory names in NetrwMaps() (Christopher Lusk)
Solution: Temporarily remove B flag in NetrwMaps() to prevent command
          injection

Signed-off-by: Christian Brabandt <cb@256bit.org>

2026-05-14 18:52:08 +00:00

..

autoload

patch 9.2.0479: [security]: runtime(tar): command injection in tar plugin

2026-05-14 15:43:44 +00:00

bitmaps

runtime: Update a few icons

2025-10-03 08:02:02 +00:00

colors

runtime(colors): improve catppuccin colorscheme

2026-01-31 16:08:51 +00:00

compiler

runtime(compiler): set zig errorformat

2026-05-12 18:11:55 +00:00

doc

runtime(doc): Fix file mode for the Italian manpage

2026-05-14 08:39:03 +00:00

ftplugin

Fix a few more typos

2026-05-04 19:10:37 +00:00

icons

…

import/dist

…

indent

Fix a few more typos

2026-05-04 19:10:37 +00:00

keymap

runtime: convert *_utf-8.vim files to actual UTF-8 encoding

2026-01-25 15:58:33 +00:00

lang

translation(zh): Update menu translation for changed "Sponsor" entry

2026-02-18 22:24:14 +00:00

macros

runtime(less.sh): Fix reading from stdin.

2026-02-18 22:28:21 +00:00

pack/dist/opt

patch 9.2.0481: runtime(netrw): command injection possible via maps

2026-05-14 18:52:08 +00:00

plugin

runtime(manpager): use \x07 instead of \a for BEL in OSC 8 regex

2026-03-24 19:48:44 +00:00

print

…

spell

runtime: Revert several "mark invalid contact addresses" commits

2026-01-01 15:14:14 +00:00

syntax

runtime(javacc): Check for existence of javaFuncDef syn group before clearing it

2026-05-11 10:15:02 +02:00

tools

runtime(preproc_indent): Ignore Swapfiles when loading buffers

2026-04-02 17:53:30 +00:00

tutor

translation(ru): Update Russian translation and fix typos in tutor

2026-02-07 22:00:32 +00:00

bugreport.vim

…

defaults.vim

runtime(defaults): Update comment for reverting C comment strings

2025-11-28 20:25:41 +00:00

delmenu.vim

…

doc.info

…

evim.vim

…

filetype.vim

patch 9.2.0371: filetype: ghostty config files are not recognized

2026-04-20 14:50:37 +00:00

ftoff.vim

…

ftplugin.vim

…

ftplugof.vim

…

gvim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

gvimrc_example.vim

…

hi16-action-make.png

…

hi22-action-make.png

…

icons.info

…

indent.vim

…

indoff.vim

…

macmap.vim

…

macros.info

…

makemenu.vim

patch 9.1.1647: filetype: Cangjie files are not recognized

2025-08-18 20:53:34 +02:00

menu.vim

runtime(menu): fix space before Tab and trailing space

2026-01-19 19:04:47 +00:00

mswin.vim

…

optwin.vim

runtime(doc): fix incorrect description of 'scrolloffpad'

2026-04-21 19:34:18 +00:00

scripts.vim

…

synmenu.vim

patch 9.1.1647: filetype: Cangjie files are not recognized

2025-08-18 20:53:34 +02:00

termcap

…

tools.info

…

tutor.info

…

vim16x16_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim16x16.gif

…

vim16x16.png

…

vim16x16.xpm

…

vim32x32_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim32x32.gif

…

vim32x32.png

…

vim32x32.xpm

…

vim48x48_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim48x48.gif

…

vim48x48.png

…

vim48x48.xpm

…

vim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

vimlogo.cdr

…

vimlogo.eps

…

vimlogo.gif

…

vimlogo.pdf

…

vimlogo.svg

…

vimlogo.xpm

…

vimrc_example.vim

…

xdg.vim

runtime(xdg): Move viminfofile storage to state dir

2026-02-19 12:24:53 +01:00